Latest

SEO Poisoning is an attack designed to manipulate search engine algorithms, promoting malicious pages to appear in top positions in search results.

The Dynamite machine is vulnerable to Race condition, SSTI, LFR and more.

The HeartMatch machine is vulnerable to insecure desseralization and privilege escalation trough SUID

The Evasion machine is vulnerable to LFI with filter bypass, session poisoning for RCE, crontab, and privilege escalation via sudo.

IAM Machine has the CVE-2021-40438 vulnerability, which allows SSRF in Apache, resulting in temporary AWS credentials and privilege escalation to root.